Skip to navigation
API ReferenceEndpoints

Create an endpoint

resourceGroupIds and secrets[].secretReferenceId must reference resource groups / secret references that belong to this same namespace, otherwise the request returns 400.

Authentication

AuthorizationBearer

WorkOS API key (Authorization: Bearer sk_…). Scope comes from the key’s permissions: a key carrying passport:admin has admin scope (full catalog CRUD), any other key has member scope (reads + access requests). Organization-owned keys are admin by ownership and carry no associated user; keys minted for a user carry theirs, which is what access requests and createdBy are attributed to.

Path parameters

namespaceIdstringRequiredformat: "uuid"

Headers

Idempotency-KeystringOptional

Optional idempotency key, retained 24h and bound to the request that first used it. Resending the same request replays the stored response (with Idempotent-Replayed: true); reusing the key with a different body or path returns 422; retrying while the original is still in flight returns 409 with Retry-After. A failed request releases its key.

Request

This endpoint expects an object.
methodenumRequired
hoststringRequired

Stored lower-cased, so the response may differ in case from the request.

pathstringRequired

Must start with ”/”. Stored as sent (case-sensitive).

statusenumOptionalDefaults to 1
Allowed values:
metadatamap from strings to any or nullOptional
Arbitrary JSON object, or null.
resourceGroupIdslist of stringsOptional
secretslist of objectsOptional

Response headers

RateLimit-Limitinteger
Requests allowed in the current window.
RateLimit-Remaininginteger
Requests remaining in the current window.
RateLimit-Resetinteger
Unix epoch seconds when the window resets.

Response

Created
dataobject

Errors

400
Bad Request Error
401
Unauthorized Error
403
Forbidden Error
404
Not Found Error
409
Conflict Error
422
Unprocessable Entity Error
429
Too Many Requests Error
500
Internal Server Error
503
Service Unavailable Error